$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json) Hash identifier: B8Vea6d5ou/9KKU8aq6UFhb9V5Dv4tPVwkjurBtanLk= Subject key identifier: DD:20:99:C0:73:1C:93:AA:A8:04:F5:5B:B2:60:AF:D3:A2:B5:6B:4C Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft Manifest number: 18 Signing time: Wed 05 Feb 2025 06:22:22 +0000 Manifest this update: Wed 05 Feb 2025 06:22:22 +0000 Manifest next update: Wed 12 Feb 2025 06:22:22 +0000 Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: DAImVgFR3/hBa6l9Awe7aKJAQCjqFJu0+j0lTNXhXFM=) 2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF207 Validity Not Before: Feb 5 06:22:22 2025 GMT Not After : Feb 12 06:22:22 2025 GMT Subject: CN=67a3039e-77fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:4d:8d:3d:dd:d1:13:13:22:70:66:4b:24: f0:0c:9f:94:34:95:7d:c3:9c:4d:7f:f8:d3:8f:e3: 59:6a:75:4f:f3:64:db:4b:dd:81:6a:d6:2b:15:ac: 02:32:d4:07:9f:69:d0:ae:4a:ca:89:d5:a5:45:67: fb:df:b8:c1:4c:cf:2a:5b:28:8f:0d:ff:16:bc:f6: 28:70:2a:d6:71:45:b9:9b:b8:c2:46:33:80:37:4c: 90:94:6f:57:87:53:45:10:ab:b8:dc:64:7a:35:f4: 10:51:eb:ce:3f:5a:3b:6b:fd:08:1a:90:92:6f:02: 1d:71:51:e6:8d:07:7d:ac:6f:1b:81:a4:5a:cd:60: a3:dc:45:30:55:2c:5f:a0:21:a4:88:d3:df:7d:8c: c8:13:53:81:43:47:40:90:92:7d:07:4a:cb:b5:3f: d1:ea:89:88:e9:18:c4:79:07:c9:f6:50:4c:59:e8: 3f:82:f5:19:4d:cc:cd:e6:17:ed:7c:60:c3:39:77: f8:5d:8a:90:2d:4f:fb:b3:7a:98:9c:8f:53:19:26: fb:7c:47:5a:ab:10:db:78:f8:ac:63:4e:f7:b4:8a: 7c:2b:f2:ca:1a:6b:2e:87:85:9c:c9:a8:d7:31:ce: 33:2c:f5:08:58:8a:35:45:f0:dd:04:17:4d:6d:00: 54:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:20:99:C0:73:1C:93:AA:A8:04:F5:5B:B2:60:AF:D3:A2:B5:6B:4C X509v3 Authority Key Identifier: keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:34:fa:b5:5d:62:19:21:30:fb:84:21:19:de:68:c1:26:1d: a6:f6:67:92:14:b5:07:e6:35:c2:ec:49:f9:d2:96:46:b6:a9: c5:bd:10:cf:07:36:1f:2e:11:e3:46:15:ce:21:20:ab:ea:3c: 33:5b:c5:7a:82:9d:18:0b:91:9e:76:94:dc:75:31:1b:5d:96: e2:2f:8a:80:7f:42:cb:ac:4c:fb:e0:ef:2e:f5:95:5f:8e:8b: fd:25:a4:39:eb:2b:e8:07:f9:68:2c:79:5b:4f:e5:f9:e0:96: 16:27:ac:dd:dd:5f:4c:03:12:65:f2:11:42:f5:4c:a3:c9:cc: d2:12:c9:21:b1:ec:27:fe:25:23:a7:79:b4:72:14:a9:2c:53: 7d:18:f4:5c:77:68:9d:c3:54:7e:47:d5:1b:f5:c0:7b:88:e3: 45:72:42:c8:c5:52:a0:55:96:39:4d:ee:e4:27:92:00:20:b1: a0:d3:d1:9d:c1:09:26:21:cc:bc:44:d7:84:a5:db:6a:b6:95: c0:4b:f4:d3:de:e2:f9:db:90:81:71:44:d9:61:40:8d:6e:74: 60:91:a2:5e:34:43:ae:b3:12:eb:e2:63:1c:ae:11:22:3d:34: a6:72:72:3a:54:c6:29:6f:c5:9f:a4:43:3e:15:1a:05:e9:1b: c0:36:0e:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjIwNzExMC8GA1UEBRMoMkQyMjNCNTZFRDREMTdBODE3OEZFOUZDNjNFMzgwMUE5 M0I1QTFEMzAeFw0yNTAyMDUwNjIyMjJaFw0yNTAyMTIwNjIyMjJaMBgxFjAUBgNV BAMTDTY3YTMwMzllLTc3ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPR02NPd3RExMicGZLJPAMn5Q0lX3DnE1/+NOP41lqdU/zZNtL3YFq1isVrAIy 1AefadCuSsqJ1aVFZ/vfuMFMzypbKI8N/xa89ihwKtZxRbmbuMJGM4A3TJCUb1eH U0UQq7jcZHo19BBR684/Wjtr/QgakJJvAh1xUeaNB32sbxuBpFrNYKPcRTBVLF+g IaSI0999jMgTU4FDR0CQkn0HSsu1P9HqiYjpGMR5B8n2UExZ6D+C9RlNzM3mF+18 YMM5d/hdipAtT/uzepicj1MZJvt8R1qrENt4+KxjTve0inwr8soaay6HhZzJqNcx zjMs9QhYijVF8N0EF01tAFSbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3SCZwHMc k6qoBPVbsmCv06K1a0wwHwYDVR0jBBgwFoAULSI7Vu1NF6gXj+n8Y+OAGpO1odMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMjA3L0FDQjA2ODVFQzIy ODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9k TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFNJN1Z1MU5GNmdYai1uOFktT0FHcE8xb2RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG MjA3L0FDQjA2ODVFQzIyODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZn WGotbjhZLU9BR3BPMW9kTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAk0+rVdYhkhMPuEIRneaMEmHab2Z5IUtQfmNcLsSfnSlka2qcW9EM8H Nh8uEeNGFc4hIKvqPDNbxXqCnRgLkZ52lNx1MRtdluIvioB/QsusTPvg7y71lV+O i/0lpDnrK+gH+WgseVtP5fnglhYnrN3dX0wDEmXyEUL1TKPJzNISySGx7Cf+JSOn ebRyFKksU30Y9Fx3aJ3DVH5H1Rv1wHuI40VyQsjFUqBVljlN7uQnkgAgsaDT0Z3B CSYhzLxE14Sl22q2lcBL9NPe4vnbkIFxRNlhQI1udGCRol40Q66zEuviYxyuESI9 NKZycjpUxilvxZ+kQz4VGgXpG8A2DhM= -----END CERTIFICATE-----Generated at Wed Feb 5 19:55:02 2025 by rpki-client